Google's 2FA feature raises security concerns.

Google Authenticator's new feature to backup 2FA data into the cloud and restore it onto other devices has been found to be unencrypted, making the seeds available to Google and anyone with a search warrant for the data. Researchers advise against using the new syncing feature until Google adds a passphrase feature to encrypt the upload before it leaves the device. Google has responded by admitting that it intentionally released the feature without end-to-end encryption but has plans to offer it down the line.